Lucene search

K
cveMitreCVE-2007-0433
HistoryJan 23, 2007 - 2:28 a.m.

CVE-2007-0433

2007-01-2302:28:00
mitre
web.nvd.nist.gov
24
cve-2007-0433
bea
aqualogic
enterprise
security
ldap
active directory
remote
authentication
vulnerability

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.3

Confidence

High

EPSS

0.004

Percentile

72.2%

Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.

Affected configurations

Nvd
Node
beaaqualogic_service_busMatch2.0
OR
beaaqualogic_service_busMatch2.0sp1
OR
beaaqualogic_service_busMatch2.0sp2
OR
beaaqualogic_service_busMatch2.1
OR
beaaqualogic_service_busMatch2.1sp1
OR
beaaqualogic_service_busMatch2.2
VendorProductVersionCPE
beaaqualogic_service_bus2.0cpe:2.3:a:bea:aqualogic_service_bus:2.0:*:*:*:*:*:*:*
beaaqualogic_service_bus2.0cpe:2.3:a:bea:aqualogic_service_bus:2.0:sp1:*:*:*:*:*:*
beaaqualogic_service_bus2.0cpe:2.3:a:bea:aqualogic_service_bus:2.0:sp2:*:*:*:*:*:*
beaaqualogic_service_bus2.1cpe:2.3:a:bea:aqualogic_service_bus:2.1:*:*:*:*:*:*:*
beaaqualogic_service_bus2.1cpe:2.3:a:bea:aqualogic_service_bus:2.1:sp1:*:*:*:*:*:*
beaaqualogic_service_bus2.2cpe:2.3:a:bea:aqualogic_service_bus:2.2:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.3

Confidence

High

EPSS

0.004

Percentile

72.2%

Related for CVE-2007-0433